The NSA And The Heartbleed Bug
Green Energy

The NSA And The Heartbleed Bug


Are any of us surprised to learn that this might have been the case?

From the article "NSA Exploited Heartbleed Bug for Years, Exposing Consumers":
The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.

The agency’s reported decision to keep the bug secret in pursuit of national security interests threatens to renew the rancorous debate over the role of the government’s top computer experts. The NSA, after declining to comment on the report, subsequently denied that it was aware of Heartbleed until the vulnerability was made public by a private security report earlier this month.

[...]

Heartbleed appears to be one of the biggest flaws in the Internet’s history, affecting the basic security of as many as two-thirds of the world’s websites. Its discovery and the creation of a fix by researchers five days ago prompted consumers to change their passwords, the Canadian government to suspend electronic tax filing, and computer companies including Cisco Systems Inc. and Juniper Networks Inc. to provide patches for their systems.

Putting the Heartbleed bug in its arsenal, the NSA was able to obtain passwords and other basic data that are the building blocks of the sophisticated hacking operations at the core of its mission, but at a cost. Millions of ordinary users were left vulnerable to attack from other nations’ intelligence arms and criminal hackers....
Read the entire article HERE.  The NSA has denied any malfeasance. Of course.

BTW, my Always On Watch account at AOL has been hacked! AOL was not supposed to have been affected by Heartbleed, so I didn't change my AOW password when I changed all my other passwords on Thursday evening. I've now changed my AOL password.




- Update: Clinton’s E-mail Is On A Hosted Exchange 2010 Server, Not In Chappaqua
Update: Clinton’s e-mail is on a hosted Exchange 2010 server, not in Chappaqua There's been a lot of controversy over how Hillary Clinton apparently used a mail server running in her Chappaqua, New York, home when she started her tenure as secretary...

- Feds Tell Web Firms To Turn Over User Account Passwords
From CNET: The U.S. government has demanded that major Internet companies divulge users' stored passwords, according to two industry sources familiar with these orders, which represent an escalation in surveillance techniques that has not previously...

- Is The Anything The Least Bit Surprising About This: U.s. Agencies Said To Swap Data With Thousands Of Firms
Bloomberg:Thousands of technology, finance and manufacturing companies are working closely with U.S. national security agencies, providing sensitive information and in return receiving benefits that include access to classified intelligence, four people...

-
WaPo: Foreign hackers targeted U.S. water plant in apparent malicious cyber attack, expert saysBy Ellen NakashimaForeign hackers broke into a water plant control system in Illinois last week and damaged a water pump in what may be the first reported...

- Hey! Maybe Weiner Was Hacked By. . .
Newsmax: Gmail Hackers Had Access to Accounts for Months Thursday, 02 Jun 2011 SHANGHAI - Hackers who broke into Google's Gmail system had access to some accounts for many months and could have been planning a more serious attack, said the cyber-security...



Green Energy








.